SNR S2989G-24TX-UPS — настройка IP-сервисов и технологии URPF для защиты сети [177/553]

Превью страниц Страница 177 / 553

S2989G-24TX Operation Manual

Chapter 3 IP services Configuration

3-15

Source IP：2.2.2.1/8

1.1.1.8/8 2.2.2.1/8

Router A Router B Router C

Figure 3-3 URPF application situation

In the above figure, Router A sends requests to the server Router B by faking

messages whose source address are 2.2.2.1/8 .In response, Router B will send the

messages to the real “2.2.2.1/8”. Such illegal messages attack both Router B and Router

C. The application of URPF technology in the situation described above can avoid the

attacks based on the Source Address Spoofing.

3.4.2

URPF Configuration Task Sequence

1. Enable URPF

2. Display and debug URPF relevant information

1. Globally enable URPF

Command

Explanation

Global mode

urpf enable

no urpf enable

Globally enable and disable URPF.

2. Display and debug URPF relevant information

Command

Explanation

Admin and Config Mode

show urpf

Display which interfaces have been

enabled with URPF function.

3.4.3

URPF Typical Example